Penetration Testing
Budget: ₹750 – ₹1,250 INR
JOB DESCRIPTION
Responsibilities:
Performing/supporting Security Testing on web applications and managing the remediation of the findings.
Provide detailed replication steps and recommendations to the development team.
Performing Security Assessment on web application and it’s Infrastructure and should provide recommendation & guide the respective stockholder for remediation.
Compliance implementation, testing and reporting.
Desired Skills/Experience:
3+ years of experience in web/Mobile application penetration testing and tools.
Good understanding and Knowledge of Information Security and technologies.
Strong knowledge of tools for web application security, including but not limited to Burpsuite, owasp zap, etc
Should be able to perform manual and automated penetration tests on web applications.
Information Security, Security Testing and/or Risk Analysis Experience
Scripting Experience in bash or python would be an added advantage
Unix/Linux environment.
Strong knowledge on the OWASP top 10 and API testing methodologies.
Should be able to perform automated and manual source code review in these languages (Java , Javascript ) would be a plus.
Good Reporting skills to present the findings to the developers.
Understanding of PCI DSS requirements and implementation would be an added advantage.
OSCP(Offensive Security Certified Professional)/CISSP(Certified Information Systems Security Professional) or any other relevant Security certification.
Responsibilities:
Performing/supporting Security Testing on web applications and managing the remediation of the findings.
Provide detailed replication steps and recommendations to the development team.
Performing Security Assessment on web application and it’s Infrastructure and should provide recommendation & guide the respective stockholder for remediation.
Compliance implementation, testing and reporting.
Desired Skills/Experience:
3+ years of experience in web/Mobile application penetration testing and tools.
Good understanding and Knowledge of Information Security and technologies.
Strong knowledge of tools for web application security, including but not limited to Burpsuite, owasp zap, etc
Should be able to perform manual and automated penetration tests on web applications.
Information Security, Security Testing and/or Risk Analysis Experience
Scripting Experience in bash or python would be an added advantage
Unix/Linux environment.
Strong knowledge on the OWASP top 10 and API testing methodologies.
Should be able to perform automated and manual source code review in these languages (Java , Javascript ) would be a plus.
Good Reporting skills to present the findings to the developers.
Understanding of PCI DSS requirements and implementation would be an added advantage.
OSCP(Offensive Security Certified Professional)/CISSP(Certified Information Systems Security Professional) or any other relevant Security certification.